Static task
static1
Behavioral task
behavioral1
Sample
919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d.exe
Resource
win10v2004-20230703-en
General
-
Target
919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d
-
Size
1.0MB
-
MD5
ca7e42207946098b20a283407ee039a1
-
SHA1
611e6f4e7bfa2e6417a5155ef221f6691a4605f0
-
SHA256
919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d
-
SHA512
f257901e167c38922694a33a70bfce9d70757294af72746d01a51daf165a5903e8e3f854a321eb33b295b87959ca85aa252a5f74eee59716489a7de33399423d
-
SSDEEP
12288:723BwrND+kbnS6CIE+SR4QQx/5kwllgvpWQ7wxR4uUvH8auvB0Tk9rdJskqIr/sH:QBwrND3B7v6JWn0TodJyIr/sMpkiT8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d
Files
-
919ace986526d5869ef82109b08a6fe4bc3d30e38b53b2b5a71431724f98426d.exe windows x86
89416df6d33cfee4b55749819062e994
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
LoadResource
SizeofResource
lstrcmpiW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
LoadLibraryW
QueryDosDeviceW
GetEnvironmentVariableW
GetCurrentThreadId
VirtualQuery
GetUserDefaultLangID
CreateMutexW
HeapAlloc
LocalFree
GetCurrentProcessId
GetProcessHeap
GetConsoleMode
GetConsoleCP
SetStdHandle
WaitForSingleObjectEx
OutputDebugStringA
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetLastError
RaiseException
DecodePointer
SetFilePointerEx
FlushFileBuffers
ReadConsoleW
GetLogicalDriveStringsW
FindClose
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
GetVersionExW
LockResource
GetSystemInfo
WaitForSingleObject
ResumeThread
OpenEventW
CreateEventW
Sleep
SetEvent
ResetEvent
SearchPathW
GetDriveTypeW
ExpandEnvironmentStringsW
GetFileAttributesW
LoadLibraryA
GetVolumeInformationW
GetDiskFreeSpaceW
FindFirstFileW
GetLongPathNameW
GetShortPathNameW
CreateFileW
GetFileAttributesExW
TryEnterCriticalSection
InitializeCriticalSection
InterlockedExchangeAdd
HeapFree
GetComputerNameExW
OpenProcess
GlobalAlloc
GlobalFree
FindNextFileW
WriteConsoleW
lstrlenW
lstrcatW
lstrcpyW
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
DeleteFileW
GetFileSizeEx
GetCurrentProcess
LocalFileTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
DosDateTimeToFileTime
FileTimeToDosDateTime
GetACP
WideCharToMultiByte
SetFileTime
GetFileSize
GetFileTime
CreateDirectoryW
GetFullPathNameW
RemoveDirectoryW
GetTempPathW
GetSystemDirectoryW
SetFileAttributesW
GetCurrentDirectoryW
GetWindowsDirectoryW
SetCurrentDirectoryW
MoveFileExW
CopyFileW
GetTempFileNameW
MoveFileW
CreateProcessW
GetExitCodeProcess
ReleaseMutex
OpenMutexW
FormatMessageW
DeviceIoControl
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetStdHandle
GetCurrentThread
HeapSize
HeapReAlloc
GetFileType
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExA
user32
UnregisterClassW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
CharNextW
PostThreadMessageW
advapi32
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
oleaut32
SysFreeString
VarUI4FromStr
Sections
.text Size: 854KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ